Re:Compromised PyTorch-nightly dependency chain December 30t...
by theteapot on Sunday January 01, 2023 @02:21AM
(#34204355)
I think blame is shared between pip being ultra vulnerable to foot guns like this and whoever put together the PyTorch nightly install not seeing the dep confusion issue from a mile away.
[ Parent
| on HN ]
There are no comments on this comment yet.